CVE-2020-14060

Deserialization of untrusted data in Jackson Databind

8.1 HighFix available

What does this mean?

: 8.1v3.1, from NVD
: 8.61%95th percentile
Fixed in: 2.9.10.5com.fasterxml.jackson.core:jackson-databind
Published: June 14, 2020
Modified: November 12, 2026
Weakness: CWE-502
Also known as: CLSA-2026-1793200844CLSA-2026-1793201047CLSA-2026-1793201459CLSA-2026-1793207967CLSA-2026-1793208072CLSA-2026-1793208446CLSA-2026-1793209314CLSA-2026-1793209403
Show 44 moreShow less
CLSA-2026-1793260214CLSA-2026-1793260224CLSA-2026-1793273163CLSA-2026-1793273322CLSA-2026-1793274003CLSA-2026-1793274225CLSA-2026-1793274500CLSA-2026-1793288062CLSA-2026-1793288285CLSA-2026-1793288485CLSA-2026-1793294610CLSA-2026-1793294643CLSA-2026-1793294975CLSA-2026-1793295423CLSA-2026-1793348684CLSA-2026-1793349486CLSA-2026-1793360883CLSA-2026-1793360990CLSA-2026-1793520513CLSA-2026-1793520709CLSA-2026-1793520797CLSA-2026-1793521151CLSA-2026-1793521240CLSA-2026-1793521537CLSA-2026-1793522232CLSA-2026-1793522561CLSA-2026-1793868222CLSA-2026-1794226743CLSA-2026-1794229591CLSA-2026-1794305366CLSA-2026-1794465768CLSA-2026-1794465982CLSA-2026-1794466171CLSA-2026-1794466277CLSA-2026-1794466718DEBIAN-CVE-2020-14060DLA-2270-1EUVD-2020-0495GHSA-j823-4qch-3rgmMGASA-2021-0153RHBA-2020:1494RHBA-2020:3255UBUNTU-CVE-2020-14060USN-4813-1

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

8.61%Up 7.2 points since Apr 14, 2021

What each source reports

NVD Score used8.1

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).

Record: CVE-2020-14060
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-502
Updated: 2026-11-02

CVE ListNo score

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).

Record: CVE-2020-14060
Updated: 2026-11-02

EUVDEUVD-2020-0495No score

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).

Record: EUVD-2020-0495
Updated: 2026-11-02

GitHub AdvisoriesGHSA-j823-4qch-3rgm8.1

Deserialization of untrusted data in Jackson Databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).

Record: GHSA-j823-4qch-3rgm
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-502
Updated: 2026-11-02

OSV8.1

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).

Record: CVE-2020-14060
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2020-140608.1

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).

Record: DEBIAN-CVE-2020-14060
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 47 moreShow less

OSVGHSA-j823-4qch-3rgm8.1

Deserialization of untrusted data in Jackson Databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).

Record: GHSA-j823-4qch-3rgm
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-502
Updated: 2026-11-02

OSVRHBA-2020:14948.1

Red Hat Bug Fix Advisory: Satellite 6.6.3 Async Bug Fix Update

Record: RHBA-2020:1494
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHBA-2020:32558.1

Red Hat Bug Fix Advisory: Satellite 6.7.2 Async Bug Fix Update

Record: RHBA-2020:3255
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2020-140608.1

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).

Record: UBUNTU-CVE-2020-14060
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVCLSA-2026-1793200844No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.6.7.3-tuxcare.2.

Record: CLSA-2026-1793200844
Updated: 2026-11-02

OSVCLSA-2026-1793201047No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.6.7.2-tuxcare.2.

Record: CLSA-2026-1793201047
Updated: 2026-11-02

OSVCLSA-2026-1793201459No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.9.10.4-tuxcare.2.

Record: CLSA-2026-1793201459
Updated: 2026-11-02

OSVCLSA-2026-1793207967No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.6.7.1-tuxcare.2.

Record: CLSA-2026-1793207967
Updated: 2026-11-06

OSVCLSA-2026-1793208072No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (31 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 31 CVEs. Fixed in 2.5.4-tuxcare.2.

Record: CLSA-2026-1793208072
Updated: 2026-11-06

OSVCLSA-2026-1793208446No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.7.0-tuxcare.2.

Record: CLSA-2026-1793208446
Updated: 2026-11-06

OSVCLSA-2026-1793209314No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.7.3-tuxcare.2.

Record: CLSA-2026-1793209314
Updated: 2026-11-06

OSVCLSA-2026-1793209403No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.7.1-tuxcare.2.

Record: CLSA-2026-1793209403
Updated: 2026-11-06

OSVCLSA-2026-1793260214No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 4 CVEs. Fixed in 2.7.9.7-tuxcare.2.

Record: CLSA-2026-1793260214
Updated: 2026-11-02

OSVCLSA-2026-1793260224No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 3 CVEs. Fixed in 2.7.9.3-tuxcare.2.

Record: CLSA-2026-1793260224
Updated: 2026-11-02

OSVCLSA-2026-1793273163No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.9.10-tuxcare.2.

Record: CLSA-2026-1793273163
Updated: 2026-11-02

OSVCLSA-2026-1793273322No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.9.8-tuxcare.2.

Record: CLSA-2026-1793273322
Updated: 2026-11-02

OSVCLSA-2026-1793274003No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.9.9.1-tuxcare.2.

Record: CLSA-2026-1793274003
Updated: 2026-11-02

OSVCLSA-2026-1793274225No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.8.7-tuxcare.4.

Record: CLSA-2026-1793274225
Updated: 2026-11-02

OSVCLSA-2026-1793274500No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.9.10.3-tuxcare.3.

Record: CLSA-2026-1793274500
Updated: 2026-11-02

OSVCLSA-2026-1793288062No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.8.4-tuxcare.3.

Record: CLSA-2026-1793288062
Updated: 2026-11-02

OSVCLSA-2026-1793288285No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.8.5-tuxcare.3.

Record: CLSA-2026-1793288285
Updated: 2026-11-02

OSVCLSA-2026-1793288485No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.9.7-tuxcare.2.

Record: CLSA-2026-1793288485
Updated: 2026-11-02

OSVCLSA-2026-1793294610No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (12 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 12 CVEs. Fixed in 2.4.5-tuxcare.2.

Record: CLSA-2026-1793294610
Updated: 2026-11-06

OSVCLSA-2026-1793294643No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.8.11-tuxcare.2.

Record: CLSA-2026-1793294643
Updated: 2026-11-02

OSVCLSA-2026-1793294975No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.8.10-tuxcare.3.

Record: CLSA-2026-1793294975
Updated: 2026-11-02

OSVCLSA-2026-1793295423No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.9.4-tuxcare.2.

Record: CLSA-2026-1793295423
Updated: 2026-11-02

OSVCLSA-2026-1793348684No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 3 CVEs. Fixed in 2.7.9-tuxcare.3.

Record: CLSA-2026-1793348684
Updated: 2026-11-02

OSVCLSA-2026-1793349486No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 3 CVEs. Fixed in 2.9.3-tuxcare.4.

Record: CLSA-2026-1793349486
Updated: 2026-11-02

OSVCLSA-2026-1793360883No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (12 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 12 CVEs. Fixed in 2.7.5-tuxcare.3.

Record: CLSA-2026-1793360883
Updated: 2026-11-06

OSVCLSA-2026-1793360990No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.7.8-tuxcare.3.

Record: CLSA-2026-1793360990
Updated: 2026-11-02

OSVCLSA-2026-1793520513No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (14 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 14 CVEs. Fixed in 2.8.11.3-tuxcare.2.

Record: CLSA-2026-1793520513
Updated: 2026-11-02

OSVCLSA-2026-1793520709No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (12 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 12 CVEs. Fixed in 2.9.1-tuxcare.2.

Record: CLSA-2026-1793520709
Updated: 2026-11-02

OSVCLSA-2026-1793520797No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.8.11.1-tuxcare.3.

Record: CLSA-2026-1793520797
Updated: 2026-11-02

OSVCLSA-2026-1793521151No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (13 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 13 CVEs. Fixed in 2.9.9-tuxcare.2.

Record: CLSA-2026-1793521151
Updated: 2026-11-02

OSVCLSA-2026-1793521240No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (16 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 16 CVEs. Fixed in 2.9.9.3-tuxcare.2.

Record: CLSA-2026-1793521240
Updated: 2026-11-02

OSVCLSA-2026-1793521537No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (19 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 19 CVEs. Fixed in 2.9.5-tuxcare.2.

Record: CLSA-2026-1793521537
Updated: 2026-11-06

OSVCLSA-2026-1793522232No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (14 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 14 CVEs. Fixed in 2.9.10.1-tuxcare.2.

Record: CLSA-2026-1793522232
Updated: 2026-11-02

OSVCLSA-2026-1793522561No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 11 CVEs. Fixed in 2.9.2-tuxcare.3.

Record: CLSA-2026-1793522561
Updated: 2026-11-02

OSVCLSA-2026-1793868222No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.8.11.4-tuxcare.4.

Record: CLSA-2026-1793868222
Updated: 2026-11-06

OSVCLSA-2026-1794226743No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (12 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 12 CVEs. Fixed in 2.10.2-tuxcare.5.

Record: CLSA-2026-1794226743
Updated: 2026-11-09

OSVCLSA-2026-1794229591No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 2 CVEs. Fixed in 2.2.3-tuxcare.4.

Record: CLSA-2026-1794229591
Updated: 2026-11-09

OSVCLSA-2026-1794305366No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.10.3-tuxcare.6.

Record: CLSA-2026-1794305366
Updated: 2026-11-10

OSVCLSA-2026-1794465768No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (25 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 25 CVEs. Fixed in 2.4.0-tuxcare.6.

Record: CLSA-2026-1794465768
Updated: 2026-11-12

OSVCLSA-2026-1794465982No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (26 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 26 CVEs. Fixed in 2.1.4-tuxcare.5.

Record: CLSA-2026-1794465982
Updated: 2026-11-12

OSVCLSA-2026-1794466171No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (25 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 25 CVEs. Fixed in 2.6.3-tuxcare.6.

Record: CLSA-2026-1794466171
Updated: 2026-11-12

OSVCLSA-2026-1794466277No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (27 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 27 CVEs. Fixed in 2.4.1-tuxcare.6.

Record: CLSA-2026-1794466277
Updated: 2026-11-12

OSVCLSA-2026-1794466718No score

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (28 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 28 CVEs. Fixed in 2.4.3-tuxcare.7.

Record: CLSA-2026-1794466718
Updated: 2026-11-12

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`com.fasterxml.jackson.core:jackson-databind` Maven	2.9.0 to 2.9.10.4	2.9.10.5
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 5 CVEs	2.6.7.3 up to 2.6.7.3-tuxcare.2, plus listed versions 2.6.7.3-tuxcare.1	2.6.7.3-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 5 CVEs	2.6.7.2 up to 2.6.7.2-tuxcare.2, plus listed versions 2.6.7.2-tuxcare.1	2.6.7.2-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 6 CVEs	2.9.10.4 up to 2.9.10.4-tuxcare.2, plus listed versions 2.9.10.4-tuxcare.1	2.9.10.4-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 8 CVEs	2.6.7.1 up to 2.6.7.1-tuxcare.2, plus listed versions 2.6.7.1-tuxcare.1	2.6.7.1-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 30 CVEs	2.5.4 up to 2.5.4-tuxcare.2, plus listed versions 2.5.4-tuxcare.1	2.5.4-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 5 CVEs	2.7.0 up to 2.7.0-tuxcare.2, plus listed versions 2.7.0-tuxcare.1	2.7.0-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 5 CVEs	2.7.3 up to 2.7.3-tuxcare.2, plus listed versions 2.7.3-tuxcare.1	2.7.3-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 4 CVEs	2.7.1 up to 2.7.1-tuxcare.2, plus listed versions 2.7.1-tuxcare.1	2.7.1-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 4 CVEs	2.7.9.7 up to 2.7.9.7-tuxcare.2, plus listed versions 2.7.9.7-tuxcare.1	2.7.9.7-tuxcare.2

Show 122 moreShow less

Affected packages
Package	Affected	Fixed
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 2 CVEs	2.7.9.3 up to 2.7.9.3-tuxcare.2, plus listed versions 2.7.9.3-tuxcare.1	2.7.9.3-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 8 CVEs	2.9.10 up to 2.9.10-tuxcare.2, plus listed versions 2.9.10-tuxcare.1	2.9.10-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 6 CVEs	2.9.8 up to 2.9.8-tuxcare.2, plus listed versions 2.9.8-tuxcare.1	2.9.8-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 7 CVEs	2.9.9.1 up to 2.9.9.1-tuxcare.2, plus listed versions 2.9.9.1-tuxcare.1	2.9.9.1-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 7 CVEs	2.8.7 up to 2.8.7-tuxcare.4, plus listed versions 2.8.7-tuxcare.12.8.7-tuxcare.22.8.7-tuxcare.3	2.8.7-tuxcare.4
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 7 CVEs	2.9.10.3 up to 2.9.10.3-tuxcare.3, plus listed versions 2.9.10.3-tuxcare.12.9.10.3-tuxcare.2	2.9.10.3-tuxcare.3
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 7 CVEs	2.8.4 up to 2.8.4-tuxcare.3, plus listed versions 2.8.4-tuxcare.12.8.4-tuxcare.2	2.8.4-tuxcare.3
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 7 CVEs	2.8.5 up to 2.8.5-tuxcare.3, plus listed versions 2.8.5-tuxcare.12.8.5-tuxcare.2	2.8.5-tuxcare.3
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 7 CVEs	2.9.7 up to 2.9.7-tuxcare.2, plus listed versions 2.9.7-tuxcare.1	2.9.7-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 12 CVEs	2.4.5 up to 2.4.5-tuxcare.2, plus listed versions 2.4.5-tuxcare.1	2.4.5-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 7 CVEs	2.8.11 up to 2.8.11-tuxcare.2, plus listed versions 2.8.11-tuxcare.1	2.8.11-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 7 CVEs	2.8.10 up to 2.8.10-tuxcare.3, plus listed versions 2.8.10-tuxcare.12.8.10-tuxcare.2	2.8.10-tuxcare.3
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 7 CVEs	2.9.4 up to 2.9.4-tuxcare.2, plus listed versions 2.9.4-tuxcare.1	2.9.4-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 3 CVEs	2.7.9 up to 2.7.9-tuxcare.3, plus listed versions 2.7.9-tuxcare.12.7.9-tuxcare.2	2.7.9-tuxcare.3
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 3 CVEs	2.9.3 up to 2.9.3-tuxcare.4, plus listed versions 2.9.3-tuxcare.12.9.3-tuxcare.22.9.3-tuxcare.3	2.9.3-tuxcare.4
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 12 CVEs	2.7.5 up to 2.7.5-tuxcare.3, plus listed versions 2.7.5-tuxcare.12.7.5-tuxcare.2	2.7.5-tuxcare.3
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 5 CVEs	2.7.8 up to 2.7.8-tuxcare.3, plus listed versions 2.7.8-tuxcare.12.7.8-tuxcare.2	2.7.8-tuxcare.3
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 14 CVEs	2.8.11.3 up to 2.8.11.3-tuxcare.2, plus listed versions 2.8.11.3-tuxcare.1	2.8.11.3-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 12 CVEs	2.9.1 up to 2.9.1-tuxcare.2, plus listed versions 2.9.1-tuxcare.1	2.9.1-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 7 CVEs	2.8.11.1 up to 2.8.11.1-tuxcare.3, plus listed versions 2.8.11.1-tuxcare.12.8.11.1-tuxcare.2	2.8.11.1-tuxcare.3
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 13 CVEs	2.9.9 up to 2.9.9-tuxcare.2, plus listed versions 2.9.9-tuxcare.1	2.9.9-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 16 CVEs	2.9.9.3 up to 2.9.9.3-tuxcare.2, plus listed versions 2.9.9.3-tuxcare.1	2.9.9.3-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 19 CVEs	2.9.5 up to 2.9.5-tuxcare.2, plus listed versions 2.9.5-tuxcare.1	2.9.5-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 14 CVEs	2.9.10.1 up to 2.9.10.1-tuxcare.2, plus listed versions 2.9.10.1-tuxcare.1	2.9.10.1-tuxcare.2
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 11 CVEs	2.9.2 up to 2.9.2-tuxcare.3, plus listed versions 2.9.2-tuxcare.12.9.2-tuxcare.2	2.9.2-tuxcare.3
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 8 CVEs	2.8.11.4 up to 2.8.11.4-tuxcare.4, plus listed versions 2.8.11.4-tuxcare.12.8.11.4-tuxcare.22.8.11.4-tuxcare.3	2.8.11.4-tuxcare.4
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 12 CVEs	2.10.2 up to 2.10.2-tuxcare.5, plus listed versions 2.10.2-tuxcare.12.10.2-tuxcare.22.10.2-tuxcare.32.10.2-tuxcare.4	2.10.2-tuxcare.5
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 2 CVEs	2.2.3 up to 2.2.3-tuxcare.4, plus listed versions 2.2.3-tuxcare.12.2.3-tuxcare.22.2.3-tuxcare.3	2.2.3-tuxcare.4
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 6 CVEs	2.10.3 up to 2.10.3-tuxcare.6, plus listed versions 2.10.3-tuxcare.12.10.3-tuxcare.22.10.3-tuxcare.32.10.3-tuxcare.42.10.3-tuxcare.5	2.10.3-tuxcare.6
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 25 CVEs	2.4.0 up to 2.4.0-tuxcare.6, plus listed versions 2.4.0-tuxcare.12.4.0-tuxcare.22.4.0-tuxcare.32.4.0-tuxcare.42.4.0-tuxcare.5	2.4.0-tuxcare.6
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 26 CVEs	2.1.4 up to 2.1.4-tuxcare.5, plus listed versions 2.1.4-tuxcare.12.1.4-tuxcare.22.1.4-tuxcare.32.1.4-tuxcare.4	2.1.4-tuxcare.5
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 25 CVEs	2.6.3 up to 2.6.3-tuxcare.6, plus listed versions 2.6.3-tuxcare.12.6.3-tuxcare.22.6.3-tuxcare.32.6.3-tuxcare.42.6.3-tuxcare.5	2.6.3-tuxcare.6
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 27 CVEs	2.4.1 up to 2.4.1-tuxcare.6, plus listed versions 2.4.1-tuxcare.12.4.1-tuxcare.22.4.1-tuxcare.32.4.1-tuxcare.42.4.1-tuxcare.5	2.4.1-tuxcare.6
`com.fasterxml.jackson.core:jackson-databind` TuxCare:Maven From an advisory covering 28 CVEs	2.4.3 up to 2.4.3-tuxcare.7, plus listed versions 2.4.3-tuxcare.12.4.3-tuxcare.22.4.3-tuxcare.32.4.3-tuxcare.42.4.3-tuxcare.52.4.3-tuxcare.6	2.4.3-tuxcare.7
`jackson-databind` Debian:12	before 2.11.1-1	2.11.1-1
`jackson-databind` Debian:13	before 2.11.1-1	2.11.1-1
`jackson-databind` Debian:14	before 2.11.1-1	2.11.1-1
`jackson-databind` Debian:8 From an advisory covering 4 CVEs	before 2.4.2-2+deb8u15, plus listed versions 2.4.2-22.4.2-2+deb8u12.4.2-2+deb8u102.4.2-2+deb8u112.4.2-2+deb8u12 Show 10 moreShow less 2.4.2-2+deb8u132.4.2-2+deb8u142.4.2-2+deb8u22.4.2-2+deb8u32.4.2-2+deb8u42.4.2-2+deb8u52.4.2-2+deb8u62.4.2-2+deb8u72.4.2-2+deb8u82.4.2-2+deb8u9	2.4.2-2+deb8u15
`com.fasterxml.jackson.core:jackson-databind` Maven	2.9.0 up to 2.9.10.5, plus listed versions 2.9.0.pr12.9.0.pr22.9.0.pr32.9.0.pr42.9.1 Show 16 moreShow less 2.9.102.9.10.12.9.10.22.9.10.32.9.10.42.9.22.9.32.9.42.9.52.9.62.9.72.9.82.9.92.9.9.12.9.9.22.9.9.3	2.9.10.5
`jackson-databind` Mageia:7 From an advisory covering 32 CVEs	before 2.9.8-1.2.mga7	2.9.8-1.2.mga7
`foreman` Red Hat:satellite_capsule:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`foreman-debug` Red Hat:satellite_capsule:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`satellite` Red Hat:satellite_capsule:6.6::el7 From an advisory covering 13 CVEs	before 0:6.6.3-1.el7sat	0:6.6.3-1.el7sat
`satellite-capsule` Red Hat:satellite_capsule:6.6::el7 From an advisory covering 13 CVEs	before 0:6.6.3-1.el7sat	0:6.6.3-1.el7sat
`satellite-common` Red Hat:satellite_capsule:6.6::el7 From an advisory covering 13 CVEs	before 0:6.6.3-1.el7sat	0:6.6.3-1.el7sat
`satellite-debug-tools` Red Hat:satellite_capsule:6.6::el7 From an advisory covering 13 CVEs	before 0:6.6.3-1.el7sat	0:6.6.3-1.el7sat
`candlepin` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:2.6.16-1.el7sat	0:2.6.16-1.el7sat
`candlepin-selinux` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:2.6.16-1.el7sat	0:2.6.16-1.el7sat
`foreman` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`foreman-cli` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`foreman-debug` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`foreman-ec2` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`foreman-gce` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`foreman-journald` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`foreman-libvirt` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`foreman-openstack` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`foreman-ovirt` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`foreman-postgresql` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`foreman-rackspace` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`foreman-telemetry` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`foreman-vmware` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:1.22.0.39-2.el7sat	0:1.22.0.39-2.el7sat
`satellite` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:6.6.3-1.el7sat	0:6.6.3-1.el7sat
`satellite-capsule` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:6.6.3-1.el7sat	0:6.6.3-1.el7sat
`satellite-cli` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:6.6.3-1.el7sat	0:6.6.3-1.el7sat
`satellite-common` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:6.6.3-1.el7sat	0:6.6.3-1.el7sat
`satellite-debug-tools` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:6.6.3-1.el7sat	0:6.6.3-1.el7sat
`tfm-rubygem-fog-ovirt` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:1.2.3-1.el7sat	0:1.2.3-1.el7sat
`tfm-rubygem-foreman_rh_cloud` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:0.9.4.1-2.el7sat	0:0.9.4.1-2.el7sat
`tfm-rubygem-katello` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:3.12.0.41-1.el7sat	0:3.12.0.41-1.el7sat
`tfm-rubygem-runcible` Red Hat:satellite:6.6::el7 From an advisory covering 13 CVEs	before 0:2.13.0-1.el7sat	0:2.13.0-1.el7sat
`foreman` Red Hat:satellite_capsule:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`foreman-debug` Red Hat:satellite_capsule:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`foreman-installer` Red Hat:satellite_capsule:6.7::el7 From an advisory covering 12 CVEs	before 1:1.24.1.21-1.el7sat	1:1.24.1.21-1.el7sat
`foreman-installer-katello` Red Hat:satellite_capsule:6.7::el7 From an advisory covering 12 CVEs	before 1:1.24.1.21-1.el7sat	1:1.24.1.21-1.el7sat
`pulp-rpm` Red Hat:satellite_capsule:6.7::el7 From an advisory covering 12 CVEs	before 0:2.21.0.6-1.el7sat	0:2.21.0.6-1.el7sat
`pulp-rpm-admin-extensions` Red Hat:satellite_capsule:6.7::el7 From an advisory covering 12 CVEs	before 0:2.21.0.6-1.el7sat	0:2.21.0.6-1.el7sat
`pulp-rpm-plugins` Red Hat:satellite_capsule:6.7::el7 From an advisory covering 12 CVEs	before 0:2.21.0.6-1.el7sat	0:2.21.0.6-1.el7sat
`python-pulp-integrity` Red Hat:satellite_capsule:6.7::el7 From an advisory covering 12 CVEs	before 0:2.21.0.6-1.el7sat	0:2.21.0.6-1.el7sat
`python-pulp-rpm-common` Red Hat:satellite_capsule:6.7::el7 From an advisory covering 12 CVEs	before 0:2.21.0.6-1.el7sat	0:2.21.0.6-1.el7sat
`satellite` Red Hat:satellite_capsule:6.7::el7 From an advisory covering 12 CVEs	before 0:6.7.2-1.el7sat	0:6.7.2-1.el7sat
`satellite-capsule` Red Hat:satellite_capsule:6.7::el7 From an advisory covering 12 CVEs	before 0:6.7.2-1.el7sat	0:6.7.2-1.el7sat
`satellite-common` Red Hat:satellite_capsule:6.7::el7 From an advisory covering 12 CVEs	before 0:6.7.2-1.el7sat	0:6.7.2-1.el7sat
`satellite-debug-tools` Red Hat:satellite_capsule:6.7::el7 From an advisory covering 12 CVEs	before 0:6.7.2-1.el7sat	0:6.7.2-1.el7sat
`candlepin` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:2.9.28-1.el7sat	0:2.9.28-1.el7sat
`candlepin-selinux` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:2.9.28-1.el7sat	0:2.9.28-1.el7sat
`foreman` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`foreman-cli` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`foreman-debug` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`foreman-ec2` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`foreman-gce` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`foreman-installer` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 1:1.24.1.21-1.el7sat	1:1.24.1.21-1.el7sat
`foreman-installer-katello` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 1:1.24.1.21-1.el7sat	1:1.24.1.21-1.el7sat
`foreman-journald` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`foreman-libvirt` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`foreman-openstack` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`foreman-ovirt` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`foreman-postgresql` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`foreman-rackspace` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`foreman-telemetry` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`foreman-vmware` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:1.24.1.24-1.el7sat	0:1.24.1.24-1.el7sat
`pulp-rpm` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:2.21.0.6-1.el7sat	0:2.21.0.6-1.el7sat
`pulp-rpm-admin-extensions` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:2.21.0.6-1.el7sat	0:2.21.0.6-1.el7sat
`pulp-rpm-plugins` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:2.21.0.6-1.el7sat	0:2.21.0.6-1.el7sat
`python-pulp-integrity` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:2.21.0.6-1.el7sat	0:2.21.0.6-1.el7sat
`python-pulp-rpm-common` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:2.21.0.6-1.el7sat	0:2.21.0.6-1.el7sat
`satellite` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:6.7.2-1.el7sat	0:6.7.2-1.el7sat
`satellite-capsule` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:6.7.2-1.el7sat	0:6.7.2-1.el7sat
`satellite-cli` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:6.7.2-1.el7sat	0:6.7.2-1.el7sat
`satellite-common` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:6.7.2-1.el7sat	0:6.7.2-1.el7sat
`satellite-debug-tools` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:6.7.2-1.el7sat	0:6.7.2-1.el7sat
`tfm-rubygem-fog-vsphere` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:3.2.1.1-1.el7sat	0:3.2.1.1-1.el7sat
`tfm-rubygem-foreman-tasks` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:0.17.5.6-1.el7sat	0:0.17.5.6-1.el7sat
`tfm-rubygem-foreman_remote_execution` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:2.0.10.1-1.el7sat	0:2.0.10.1-1.el7sat
`tfm-rubygem-foreman_remote_execution-cockpit` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:2.0.10.1-1.el7sat	0:2.0.10.1-1.el7sat
`tfm-rubygem-foreman_rh_cloud` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:1.0.9-1.el7sat	0:1.0.9-1.el7sat
`tfm-rubygem-hammer_cli_foreman` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:0.19.6.5-1.el7sat	0:0.19.6.5-1.el7sat
`tfm-rubygem-katello` Red Hat:satellite:6.7::el7 From an advisory covering 12 CVEs	before 0:3.14.0.25-1.el7sat	0:3.14.0.25-1.el7sat
`jackson-databind` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 2.2.2-12.2.2-1ubuntu0.1~esm1	None known
`jackson-databind` Ubuntu:Pro:16.04:LTS	before 2.4.2-3ubuntu0.1~esm2, plus listed versions 2.4.2-22.4.2-32.4.2-3ubuntu0.1~esm1	2.4.2-3ubuntu0.1~esm2
`jackson-databind` Ubuntu:18.04:LTS	All versions, plus listed versions 2.8.6-12.9.1-12.9.4-12.9.5-12.9.8-1~18.04	None known
`jackson-databind` Ubuntu:20.04:LTS	All versions, plus listed versions 2.9.9.3-12.10.0-22.10.1-12.10.2-1	None known
`jackson-databind` Ubuntu:Pro:16.04:LTS From an advisory covering 39 CVEs	before 2.4.2-3ubuntu0.1~esm2, plus listed versions 2.4.2-22.4.2-32.4.2-3ubuntu0.1~esm1	2.4.2-3ubuntu0.1~esm2

History

History
Recorded	Changed	Sources
Nov 12, 2026	affected, aliases	OSV
Nov 10, 2026	aliases
Nov 10, 2026	affected, aliases	OSV
Nov 9, 2026	affected, aliases	OSV
Nov 6, 2026	affected, aliases	OSV
Nov 6, 2026	affected
Nov 5, 2026	affected, aliases, facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-14060 is a high vulnerability (CVSS 8.1) in Fasterxml Jackson-databind, published June 14, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.61%, the 95th percentile. Fixed in com.fasterxml.jackson.core:jackson-databind 2.9.10.5.

References

Show 156 moreShow less

This page doesn't list everything

Left out on purpose, here and in the API, to keep responses small: 2 source records.